Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-28331PUBLISHED: 2020-11-24
Barco wePresent WiPG-1600W devices have Improper Access Control. Affected Version(s): 2.5.1.8. The Barco wePresent WiPG-1600W device has an SSH daemon included in the firmware image. By default, the SSH daemon is disabled and does not start at system boot. The system initialization scripts read a de...
CVE-2020-28928PUBLISHED: 2020-11-24In musl libc through 1.2.1, wcsnrtombs mishandles particular combinations of destination buffer size and source character limit, as demonstrated by an invalid write access (buffer overflow).
CVE-2020-28994PUBLISHED: 2020-11-24A SQL injection vulnerability was discovered in Karenderia Multiple Restaurant System, affecting versions 5.4.2 and below. The vulnerability allows for an unauthenticated attacker to perform various tasks such as modifying and leaking all contents of the database.
CVE-2020-13620PUBLISHED: 2020-11-24Fastweb FASTGate GPON FGA2130FWB devices through 2020-05-26 allow CSRF via the router administration web panel, leading to an attacker's ability to perform administrative actions such as modifying the configuration.
CVE-2020-13942PUBLISHED: 2020-11-24
It is possible to inject malicious OGNL or MVEL scripts into the /context.json public endpoint. This was partially fixed in 1.5.1 but a new attack vector was found. In Apache Unomi version 1.5.2 scripts are now completely filtered from the input. It is highly recommended to upgrade to the latest ava...
Latest Comment: This comment is waiting for review by our moderators.
2021 Top Enterprise IT TrendsWe've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
The Malware Threat Landscape
Download this report to learn about the real makeup of online threats, as reported by the defenders who see them every day.
Tweet This
0 Comments
User Rank: Strategist
3/17/2015 | 9:34:47 PM
You have rights as a customer of organizations which failed basic security in their infrastructure. Basic prevention techniques could have made exploitation much more difficult. Do you think 1 year of credit monitoring will fully protect you? The answer it is not even remotely close to even the basic protection required. Identify theft may be the least of their worries. In some of these cases there are bank account numbers floating around.
This is getting to be a major confidence issue on the banking system.
At a minimum, I feel lifetime credit protection should be mandated, and the ability to pay for lifetime credit locks. That is the absolute most basic thing they should pay. What would that cost? Well, to lock credit reports is $5 or more for each one (at this time). In addition, if you want a loan or needed a credit check, you have to pay for unlocks. Is it your fault you need that unlock? Demand an adequate amount of money to pay for lifetime credit locks and unlocks and credit monitoring. Even with credit locks, the credit is opened for a window of time where others could exploit it. This is serious and corporations shouldn't be trying to weasel their way out of their liability by offering one year of credit monitoring.